CVE-2026-77189

creationtimestamp| type| source ---|---|--- 2026-09-01 07:53:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7p55mag5jypmt...

CVE-2026-80709

A flaw was found in the Linux kernel's s390/zcrypt component. An incorrect upper limit check for the domain value when processing an EP11 Cryptographic Coprocessor Request Block CPRB can allow a local user on custom device nodes to access heap memory. This could lead to information disclosure or...

CVE-2026-19948

The Cozy Blocks WordPress plugin (all versions up to and including 2.2.17 ) is vulnerable to authorization bypass . Multiple block renderers unconditionally emit the sidebarNonce value into public page HTML with no login gate, allowing unauthenticated visitors to harvest a valid nonce and pass th...

CVE-2026-82735

creationtimestamp| type| source ---|---|--- 2026-09-01 04:20:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dxuowsh3junbh...

CVE-2026-81704

creationtimestamp| type| source ---|---|--- 2026-09-01 04:04:51+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mugk4ncenb2s 2026-09-04 09:07:08+00:00| seen| https://bsky.app/profile/potato.software/post/3muomfwb6ip2l 2026-09-04 09:07:08+00:00| seen|...

CVE-2026-75865

creationtimestamp| type| source ---|---|--- 2026-09-01 03:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mugjttrvhg2u 2026-09-01 04:04:34+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mugk44tbld2w 2026-09-01 04:07:10+00:00| seen|...

EEF-CVE-2026-82739 Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in...

CVE-2026-82739 Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in lib/ash/resource/validation/confirm.ex...

CVE-2026-77950

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. applyerrorhandler/3 in...

EEF-CVE-2026-82733 Route handler return value echoed into AshTypescript error response

Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal application data from an HTTP 500 response body. When a typed-controller route handler returns anything other than a %Plug.Conn,...

CVE-2026-76957

creationtimestamp| type| source ---|---|--- 2026-09-01 00:01:22+00:00| seen| https://bsky.app/profile/slackers.it/post/3mug4jap4or2n...

PT-2026-84187

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description An issue exists within the Profile Backup component. Recommendations Update Firefox to version...

PT-2026-84181

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description Privilege escalation exists in the WebDriver BiDi component. WebDriver BiDi is a protocol that allows for bidirectional communication between the browser and the...

PT-2026-84188

Name of the Vulnerable Software and Affected Versions Firefox Focus for Android versions prior to 155 Description An issue exists in Firefox Focus for Android. Recommendations Update to version 155...

ASB-A-484928416

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-82393

creationtimestamp| type| source ---|---|--- 2026-08-31 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mufz4nnl6z2o 2026-09-02 16:35:40+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-vq4v-j7r6-jq4m...

CVE-2026-81756

creationtimestamp| type| source ---|---|--- 2026-08-31 22:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufw66pgri2f...

CVE-2026-82226

creationtimestamp| type| source ---|---|--- 2026-08-31 22:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mufvrmimgm27 2026-08-31 22:08:23+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufw7a7fit2t...

CVE-2026-13732

creationtimestamp| type| source ---|---|--- 2026-08-31 21:04:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/37tqrj4ylyf5p...

CVE-2026-51680

creationtimestamp| type| source ---|---|--- 2026-08-31 19:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muflojyii42e 2026-08-31 20:07:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufpgoulqn2e...